In the Linux kernel, the following vulnerability has been resolved:
usb: aqc111: check packet for fixup for true limit
If a device sends a packet that is inbetween 0 and sizeof(u64) the value passed to skb_trim() as length will wrap around ending up as some very large value.
The driver will then proceed to parse the header located at that position, which will either oops or process some random value.
The fix is to check against sizeof(u64) rather than 0, which the driver currently does. The issue exists since the introduction of the driver.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 14, 2024 |
| Suse | — | Upgrade dtb-sprdUpgrade dtb-broadcomUpgrade kernel-azure-optionalUpgrade kernel-default-baseUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-azure-baseUpgrade kernel-docs-htmlUpgrade kernel-defaultUpgrade dtb-socionextUpgrade kernel-default-livepatchUpgrade reiserfs-kmp-rtUpgrade gfs2-kmp-azureUpgrade kernel-develUpgrade dtb-nvidiaUpgrade kernel-rt-optionalUpgrade dtb-marvellUpgrade kernel-default-base-rebuildUpgrade reiserfs-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade ocfs2-kmp-azureUpgrade kernel-docsUpgrade kernel-rtUpgrade kselftests-kmp-rtUpgrade kernel-azure-develUpgrade kernel-preempt-develUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-extraUpgrade gfs2-kmp-defaultUpgrade kernel-source-vanillaUpgrade cluster-md-kmp-rtUpgrade dtb-caviumUpgrade dtb-allwinnerUpgrade dtb-qcomUpgrade kernel-azureUpgrade dlm-kmp-defaultUpgrade dtb-alteraUpgrade kernel-64kb-extraUpgrade kernel-kvmsmall-vdsoUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-azureUpgrade dtb-rockchipUpgrade kernel-default-livepatch-develUpgrade kernel-debug-vdsoUpgrade kernel-obs-buildUpgrade kernel-rt-vdsoUpgrade kernel-rt_debug-develUpgrade dlm-kmp-rtUpgrade kernel-source-rtUpgrade ocfs2-kmp-64kbUpgrade dtb-renesasUpgrade kselftests-kmp-64kbUpgrade dtb-armUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade gfs2-kmp-64kbUpgrade kernel-default-extraUpgrade kernel-debugUpgrade kernel-kvmsmall-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-default-develUpgrade kernel-syms-azureUpgrade dtb-mediatekUpgrade dtb-appleUpgrade dlm-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-livepatchUpgrade kernel-macrosUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-extraUpgrade kernel-64kb-develUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmallUpgrade kernel-64kb-optionalUpgrade dlm-kmp-azureUpgrade kernel-preemptUpgrade dtb-apmUpgrade kernel-symsUpgrade kernel-devel-rtUpgrade kernel-devel-azureUpgrade dtb-xilinxUpgrade dtb-hisiliconUpgrade kernel-default-manUpgrade dtb-amazonUpgrade ocfs2-kmp-rtUpgrade kernel-azure-vdsoUpgrade kernel-rt-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-default-vdsoUpgrade kernel-debug-livepatch-develUpgrade dtb-lgUpgrade dtb-freescaleUpgrade kernel-sourceUpgrade kernel-source-azureUpgrade dtb-exynosUpgrade kernel-syms-rtUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-develUpgrade kernel-default-optionalUpgrade kernel-debug-develUpgrade dtb-amdUpgrade dtb-amlogic | Jun 12, 2024 | May 14, 2024 |
| Ubuntu | — | Upgrade linux-riscv-5.15Upgrade linux-nvidia-tegra-igxUpgrade linux-lowlatencyUpgrade linux-gcp-5.15Upgrade linux-iotUpgrade linux-oracleUpgrade linux-azureUpgrade linux-azure-5.15Upgrade linux-fipsUpgrade linux-kvmUpgrade linux-realtimeUpgrade linux-azure-fipsUpgrade linux-gcp-fipsUpgrade linux-gcp-5.4Upgrade linux-azure-fde-5.15Upgrade linux-oracle-5.15Upgrade linux-gkeopUpgrade linux-azure-fdeUpgrade linux-xilinx-zynqmpUpgrade linux-nvidiaUpgrade linux-hwe-5.15Upgrade linux-azure-5.4Upgrade linux-intel-iotg-5.15Upgrade linux-hwe-5.4Upgrade linux-gkeop-5.15Upgrade linux-aws-fipsUpgrade linux-ibmUpgrade linux-intel-iotgUpgrade linux-nvidia-6.5Upgrade linux-gcpUpgrade linux-nvidia-tegra-5.15Upgrade linux-intel-iot-realtimeUpgrade linux-bluefieldUpgrade linuxUpgrade linux-raspi-5.4Upgrade linux-ibm-5.4Upgrade linux-lowlatency-hwe-5.15Upgrade linux-raspiUpgrade linux-aws-5.4Upgrade linux-awsUpgrade linux-nvidia-tegraUpgrade linux-gkeUpgrade linux-oracle-5.4Upgrade linux-aws-5.15Upgrade linux-ibm-5.15 | Nov 19, 2024 | May 14, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 13, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub